chore(i18n): finish translating code comments and scripts to English

Completes the English-only standardization for code, comments, scripts
and CI templates (UI/CLI-facing strings stay bilingual pt-BR/en,
untouched). Covers the remaining crates/, apps/gui/ui/ and
apps/gui/src-tauri/ comments, .gitea/ workflow and template comments,
.githooks/ hooks, and the scripts/ source comments for the files
already renamed in a prior commit (check.sh, generate-logo.py,
install-hooks.sh).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VAyr8d7HuAdUGB6aA5xmDD

scripts/check.sh

@@ -1,67 +1,74 @@
 #!/usr/bin/env bash
-# Verificação local: roda o mesmo que o CI roda, antes de você dar push.
+# Local verification: runs the same fast checks as CI before pushing.
 #
-#   scripts/verificar.sh            rápido (~1 min): formatação, clippy, tradução, scripts, workflows
-#   scripts/verificar.sh --completo  inclui os testes do workspace e o cargo audit
+#   scripts/check.sh          fast (~1 min): fmt, clippy, i18n, scripts, workflows, semver
+#   scripts/check.sh --full   also runs workspace tests and cargo audit
 #
-# O CI leva de 5 a 30 minutos por execução e roda em Linux; quase tudo que o faz falhar
-# aparece aqui em segundos. Se isto passa, o CI só deve revelar o que é próprio dele
-# (imagens baixadas, apt do runner).
+# CI takes 5 to 30 minutes per run; almost everything that breaks CI is caught
+# here in seconds.
 set -uo pipefail
 cd "$(dirname "$0")/.."
-completo=0
-[ "${1:-}" = "--completo" ] && completo=1
-falhas=()
-passo() { # passo "nome" comando...
-  local nome="$1"; shift
-  printf '\n\033[1m== %s\033[0m\n' "$nome"
-  if "$@"; then printf '\033[32mok\033[0m %s\n' "$nome"; else printf '\033[31mFALHOU\033[0m %s\n' "$nome"; falhas+=("$nome"); fi
+full=0
+[ "${1:-}" = "--full" ] || [ "${1:-}" = "--completo" ] && full=1
+failures=()
+step() { # step "name" command...
+  local name="$1"; shift
+  printf '\n\033[1m== %s\033[0m\n' "$name"
+  if "$@"; then printf '\033[32mok\033[0m %s\n' "$name"; else printf '\033[31mFAILED\033[0m %s\n' "$name"; failures+=("$name"); fi
 }
 
-passo "formatação (cargo fmt)" cargo fmt --all -- --check
-# as mesmas flags do CI: avisos viram erro, inclusive nos testes
-passo "clippy (workspace, todos os alvos)" env RUSTFLAGS="-D warnings" cargo clippy --workspace --all-targets
-passo "cobertura da tradução da interface" node scripts/check-ui-i18n.mjs
-passo "sintaxe dos scripts bash" bash -c 'for f in scripts/*.sh .githooks/*; do bash -n "$f" || exit 1; done'
-passo "workflows e templates (YAML válido)" python3 -c "
+step "formatting (cargo fmt)" cargo fmt --all -- --check
+# Same flags as CI: warnings are treated as errors across all targets, including tests
+step "clippy (workspace, all targets)" env RUSTFLAGS="-D warnings" cargo clippy --workspace --all-targets
+step "UI translation coverage" node scripts/check-ui-i18n.mjs
+step "bash script syntax" bash -c 'for f in scripts/*.sh .githooks/*; do bash -n "$f" || exit 1; done'
+step "workflows and templates (valid YAML)" python3 -c "
 import glob, yaml
 for f in glob.glob('.gitea/**/*.yml', recursive=True):
     yaml.safe_load(open(f))
 "
-passo "versões consistentes" python3 -c "
+step "consistent Semantic Versioning 2.0.0" python3 -c "
 import json, re, sys
 from pathlib import Path
 
+semver_re = re.compile(
+    r'^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)'
+    r'(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?'
+    r'(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$'
+)
+
 def cargo_version(path):
     m = re.search(r'^version\s*=\s*\"([^\"]+)\"', Path(path).read_text(), re.M)
     if not m:
-        sys.exit(f'versão não encontrada em {path}')
+        sys.exit(f'version not found in {path}')
     return m.group(1)
 
-versoes = [
+versions = [
     cargo_version('Cargo.toml'),
     cargo_version('apps/gui/src-tauri/Cargo.toml'),
     json.load(open('apps/gui/src-tauri/tauri.conf.json'))['version'],
 ]
-if len(set(versoes)) != 1:
-    sys.exit(f'versões divergentes: Cargo.toml={versoes[0]}, src-tauri={versoes[1]}, tauri.conf={versoes[2]}')
-print(versoes[0])
+if len(set(versions)) != 1:
+    sys.exit(f'version mismatch: Cargo.toml={versions[0]}, src-tauri={versions[1]}, tauri.conf={versions[2]}')
+if not semver_re.match(versions[0]):
+    sys.exit(f'invalid SemVer 2.0.0 version: {versions[0]}')
+print(versions[0])
 "
 if [ -f apps/gui/src-tauri/Cargo.toml ] && pkg-config --exists webkit2gtk-4.1 2>/dev/null; then
-  passo "app desktop (cargo check)" env RUSTFLAGS="" cargo check --manifest-path apps/gui/src-tauri/Cargo.toml
+  step "desktop app (cargo check)" env RUSTFLAGS="" cargo check --manifest-path apps/gui/src-tauri/Cargo.toml
 else
-  printf '\n(app desktop: pulado, faltam as bibliotecas do WebKitGTK; o CI compila)\n'
+  printf '\n(desktop app: skipped, WebKitGTK development libraries not installed; built in CI)\n'
 fi
 
-if [ "$completo" = 1 ]; then
-  passo "testes (cargo test --workspace)" cargo test --workspace
-  passo "auditoria de dependências (cargo audit)" cargo audit
+if [ "$full" = 1 ]; then
+  step "tests (cargo test --workspace)" cargo test --workspace
+  step "dependency audit (cargo audit)" cargo audit
 fi
 
 printf '\n'
-if [ ${#falhas[@]} -eq 0 ]; then
-  printf '\033[32mtudo certo\033[0m: pode dar push.\n'
+if [ ${#failures[@]} -eq 0 ]; then
+  printf '\033[32mall checks passed\033[0m: ready to push.\n'
 else
-  printf '\033[31mfalhou:\033[0m %s\n' "${falhas[*]}"
+  printf '\033[31mfailed:\033[0m %s\n' "${failures[*]}"
   exit 1
 fi